Privacy policy
Last updated: 31 May 2026
This policy explains what personal data Marval Gallery collects, why, how long we keep it, who we share it with, and the rights you have under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").
1. Who we are (data controller)
Marval Gallery is a trading name of Easy Webs, a business registered in The Netherlands (BRN 99544245, VAT NL005395056B53). Easy Webs is the data controller for all personal data collected through marvalgallery.com.
Easy Webs (trading as Marval Gallery)
Registered office: Crommen Camp 4, 4161 AV Heukelum, The Netherlands
Operations / studio: Calle Roma 14, Sagunto, Spain
Email: info@marvalgallery.com
Phone: +34 622 76 66 66
2. What we collect and why
| Data | Purpose | Lawful basis (GDPR Art. 6) |
|---|---|---|
| Name, email, phone, shipping address | Process and fulfil your order; send confirmation and shipping updates | Art. 6(1)(b) — performance of a contract |
| Payment method & transaction id | Take payment via Mollie B.V. (we do not store card numbers) | Art. 6(1)(b) — performance of a contract |
| Order history, invoice, accounting record | Legal bookkeeping & tax obligations | Art. 6(1)(c) — legal obligation |
| Anonymised view counts on artwork pages | Understand which works are popular; improve the catalogue | Art. 6(1)(f) — legitimate interests |
| Contact form / email enquiries | Reply to your question | Art. 6(1)(b) / 6(1)(a) — request / consent |
3. Who we share data with (processors & recipients)
- Mollie B.V. (Keizersgracht 126, 1015 CW Amsterdam, the Netherlands) — payment processor. Mollie handles your card / iDEAL / PayPal details directly; we never see them. See Mollie's privacy policy.
- The shipping carrier you select (e.g. DHL, FedEx, UPS, MRW, Correos) — they receive the recipient name, address and phone number needed to deliver the painting.
- Our email provider — to send order confirmations and replies to enquiries.
- Our hosting provider — to operate the website and store order records.
- Spanish tax authorities — when legally required, e.g. invoice/VAT records.
We do not sell personal data and do not share it for advertising purposes.
4. International transfers
All processors listed above are either based in the European Economic Area or, where outside it, transfer data under Standard Contractual Clauses approved by the European Commission. If you ship to a non-EEA country, the carrier in that country will process your delivery address under their own privacy terms.
5. How long we keep your data
- Order & invoice records: 7 years (Dutch tax & bookkeeping requirement, art. 52 Algemene wet inzake rijksbelastingen).
- Email enquiries that didn't lead to a purchase: 12 months, then deleted.
- Anonymised page-view counts: indefinitely (no personal identifiers stored).
6. Your rights under GDPR
You can, at any time, request:
- Access — a copy of the personal data we hold about you (Art. 15)
- Rectification — correction of inaccurate data (Art. 16)
- Erasure — deletion (Art. 17), subject to bookkeeping obligations
- Restriction of processing (Art. 18)
- Data portability — export of your data in machine-readable form (Art. 20)
- Objection to processing based on legitimate interests (Art. 21)
Email info@marvalgallery.com and we'll respond within one month. If you're unhappy with how we handled your data, you can lodge a complaint with the lead supervisory authority for Easy Webs, the Dutch Autoriteit Persoonsgegevens (AP), or with the data-protection authority of your own EU member state — for residents of Spain that's the Agencia Española de Protección de Datos (AEPD).
7. Cookies & analytics
We use a small number of strictly necessary cookies to keep your cart contents during a visit. We do not use third-party advertising cookies. If we ever add optional analytics, you'll see a consent banner first.
8. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be flagged on the home page for at least 30 days.